Heap Exploit
Description of Heap Exploitation.
| Title | Creator | Modified |
|---|---|---|
| fastbin_dup_into_stack[English] | Lazenca.0x0 | Jan 03, 2021 |
| fastbin_dup[English] | Lazenca.0x0 | Jan 03, 2021 |
| Double free[English] | Lazenca.0x0 | Jan 03, 2021 |
| Double free[Korean] | Lazenca.0x0 | Jan 03, 2021 |
| House of Orange[English] | Lazenca.0x0 | Jan 03, 2021 |
| House of einherjar[English] | Lazenca.0x0 | Jan 03, 2021 |
| The House of Lore[English] | Lazenca.0x0 | Jan 03, 2021 |
| The House of Spirit[English] | Lazenca.0x0 | Jan 03, 2021 |
| The House of Force[English] | Lazenca.0x0 | Jan 03, 2021 |
| Unsafe unlink[English] | Lazenca.0x0 | Jan 03, 2021 |
| Poison null byte[English] | Lazenca.0x0 | Jan 03, 2021 |
| Overlapping chunks[English] | Lazenca.0x0 | Jan 03, 2021 |
| unsorted bin attack[English] | Lazenca.0x0 | Jan 03, 2021 |
| first-fit(Use-After-Free)[English] | Lazenca.0x0 | Jan 03, 2021 |
| House of Orange[Korean] | Lazenca.0x0 | Jan 03, 2021 |
| House of einherjar[Korean] | Lazenca.0x0 | Jan 03, 2021 |
| The House of Lore[Korean] | Lazenca.0x0 | Jan 03, 2021 |
| The House of Spirit[Korean] | Lazenca.0x0 | Jan 03, 2021 |
| The House of Force[Korean] | Lazenca.0x0 | Jan 03, 2021 |
| Unsafe unlink[Korean] | Lazenca.0x0 | Jan 03, 2021 |
Exploit table
| Exploits | Access area | Overwrite area | Free | Fake chunk | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Stack | Heap | Top chunk | F - size | F - bk | A - prev_size | A - size | Double Free | Free(Stack area) | Stack area | Heap area | |
| First fit | O | ||||||||||
| Fastbin dup | O | O | |||||||||
| Fastbindupinto stack | O | O | O | O (size) | |||||||
| Poison null byte | O | O | O (prev_size) | ||||||||
| Overlapping chunks | O | O | |||||||||
| Overlapping chunks 2 | O | O | |||||||||
| House of einherjar | O | O | O | O | |||||||
| The House of Force | O | O | |||||||||
| The House of Lore | O | O | O (Free chunk) | ||||||||
| The House of Spirit | O | O | O (size, size of top chunk) | ||||||||
| Unsorted bin attack | O | O | |||||||||
| Unsafe unlink | O | O | O | O (Free chunk) | |||||||